AbuseIPDB » 106.75.172.8
106.75.172.8
This IP was reported 8 times. Confidence of
Abuse
is 33% : ?
ISP
Shanghai UCloud Information Technology Company Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS58466
Hostname(s)
nsdashabi1.top
Domain Name
ucloud.cn
Country
🇨🇳
China
City
Shenzhen, Guangdong
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 106.75.172.8 :
This IP address has been reported a total of
8
times from
7 distinct
sources.
106.75.172.8 was first reported on
May 25th 2023 , and the most recent report was
13 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇦🇺
paulshipley.com.au
2026-07-14 23:25:50
(13 hours ago)
[Wed Jul 15 09:25:49.021682 2026] [security2:error] [pid 288340] [client 106.75.172.8:7586] [client ...
show more
[Wed Jul 15 09:25:49.021682 2026] [security2:error] [pid 288340] [client 106.75.172.8:7586] [client 106.75.172.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.co.nz"] [uri "/"] [unique_id "albFfUtFC-fugi8h8CPPOwAAAAU"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-14 21:26:05
(15 hours ago)
[Wed Jul 15 07:26:01.534584 2026] [security2:error] [pid 292276] [client 106.75.172.8:12732] [client ...
show more
[Wed Jul 15 07:26:01.534584 2026] [security2:error] [pid 292276] [client 106.75.172.8:12732] [client 106.75.172.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "whoson2day.com"] [uri "/"] [unique_id "alapaZD0OlF9H0A9-oZtPQAAAAo"]
...
show less
Web App Attack
🇨🇦
dispensight
2026-07-12 13:04:45
(3 days ago)
SecureLeaf CTI: recon path (ngrok-tagged). 1 req against taxii.dispensight.ca (e.g. /favicon.ico). D ...
show more
SecureLeaf CTI: recon path (ngrok-tagged). 1 req against taxii.dispensight.ca (e.g. /favicon.ico). Defensive report; verified infra.
show less
Port Scan
2026-07-05 14:17:34
(1 week ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇩🇪
Admins@Storch
2026-07-05 00:15:04
(1 week ago)
OPNsense: 5 hits, proto=tcp, ports=8443
Port Scan
Hacking
🇺🇸
xmission.com
2026-07-04 17:11:07
(1 week ago)
Blocked by UFW (TCP on 80)
Source port: 50770
TTL: 46
Packet length: 60
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 80)
Source port: 50770
TTL: 46
Packet length: 60
TOS: 0x08
This report (for 106.75.172.8) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇸🇰
wirecontrol
2023-05-31 09:19:39
(3 years ago)
SpamScore above: 10.0
Email Spam
🇳🇱
taivas.nl
2023-05-25 12:00:03
(3 years ago)
Spammer
Email Spam
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: